# Shape of the k8s-platform-git-auth Secret that gitrepository.yaml's
# secretRef points at — created directly via `kubectl create secret`
# (never written to a real file, real key material never committed):
#
#   kubectl create secret generic k8s-platform-git-auth \
#     -n flux-system \
#     --from-file=identity=$HOME/.ssh/id_rsa \
#     --from-file=identity.pub=$HOME/.ssh/id_rsa.pub \
#     --from-file=known_hosts=<(ssh-keyscan -p 2222 gitea.sttlab.eu)
apiVersion: v1
kind: Secret
metadata:
  name: k8s-platform-git-auth
  namespace: flux-system
type: Opaque
stringData:
  identity: |
    -----BEGIN OPENSSH PRIVATE KEY-----
    PLACEHOLDER
    -----END OPENSSH PRIVATE KEY-----
  identity.pub: ssh-rsa PLACEHOLDER
  known_hosts: |
    [gitea.sttlab.eu]:2222 ssh-ed25519 PLACEHOLDER
    [gitea.sttlab.eu]:2222 ssh-rsa PLACEHOLDER
    [gitea.sttlab.eu]:2222 ecdsa-sha2-nistp256 PLACEHOLDER